This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json) Hash identifier: rxTigkqTGy8GdOGpkjMBYFM4ytpwNYsIys7tnI/eKa4= Subject key identifier: 09:0F:1B:6C:A5:B9:44:9C:66:C7:AE:6D:A4:49:8A:23:65:0A:33:EA Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45 Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45 Certificate serial: 019B424AC6F8F53AC4341395E34293DD7AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft Manifest number: 0A96 Signing time: Sun 21 Dec 2025 19:02:35 +0000 Manifest this update: Sun 21 Dec 2025 19:02:35 +0000 Manifest next update: Mon 22 Dec 2025 19:02:35 +0000 Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: UTCrekq+3GwaxMH+5kUPcZRUtINJk1TFUJf1GHTIYMg=) 2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:c6:f8:f5:3a:c4:34:13:95:e3:42:93:dd:7a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45 Validity Not Before: Dec 21 19:02:35 2025 GMT Not After : Dec 22 19:02:35 2025 GMT Subject: CN=090f1b6ca5b9449c66c7ae6da4498a23650a33ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:36:cd:7b:ea:f1:5c:33:3c:83:ad:2a:93: 36:cc:c9:d4:cb:39:6f:17:7e:c1:36:d6:4b:5e:0e: 9f:7f:5f:a3:aa:05:98:69:68:e5:dc:43:f0:10:cf: 38:ce:28:99:64:a0:15:5a:07:af:f3:73:7b:3f:a8: c3:d6:90:14:d0:6c:ed:f6:c3:de:2a:76:7e:d4:96: fa:a6:e4:6f:06:1a:ac:3d:4d:3a:d3:71:6c:9f:85: 01:f4:5e:86:4d:d0:70:4e:38:17:43:61:65:f3:1b: 59:ca:e0:d4:d4:90:9e:7d:7d:9c:62:30:05:27:95: 03:b8:85:ab:7f:db:67:71:0d:69:e1:8c:12:f2:4b: cc:97:0b:51:1b:42:2d:f3:6c:7e:d8:25:12:9a:b4: 18:27:fe:92:34:16:c7:b7:f2:59:83:af:de:e0:42: e2:89:6c:e5:58:bb:d8:9e:6a:b3:52:4b:cc:e6:37: e2:59:9f:3f:c3:ca:5c:15:82:18:8f:92:e0:99:6a: ff:97:3a:98:4e:fb:f1:20:19:43:b0:e2:7c:d4:a2: e1:97:ed:f5:a8:73:99:9e:d5:6c:68:7d:87:0e:70: db:a0:90:91:30:3f:ad:ef:23:41:9f:9c:68:c2:d5: 96:f0:14:0c:61:9c:4c:fb:b1:22:f2:05:49:d1:6a: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:1B:6C:A5:B9:44:9C:66:C7:AE:6D:A4:49:8A:23:65:0A:33:EA X509v3 Authority Key Identifier: keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f5:0d:8c:44:49:b1:a0:68:1e:e1:e3:64:99:80:f0:07:3a: 4b:d3:5e:d7:71:b5:09:23:98:96:be:b0:d3:ae:92:50:bc:bf: 94:46:81:53:91:50:d0:ae:35:cb:2e:99:f4:3c:20:3b:ab:24: cb:3f:85:db:75:91:b8:b1:15:6e:90:7f:18:62:fd:c9:0e:09: ad:da:90:52:ab:c2:eb:97:98:e6:0c:54:74:b6:6f:36:78:a1: ed:60:b1:22:4a:22:29:76:c6:42:eb:f7:8d:4e:f8:57:f2:fb: 9a:8b:b2:fe:8c:6d:17:c7:7d:21:ab:02:ae:00:fc:11:78:e5: 55:88:f3:41:40:64:61:55:a1:c6:37:6c:21:fa:d9:2f:38:db: d2:c9:bf:12:4a:e9:c2:81:0f:b8:38:39:0b:78:46:0f:c3:5c: 01:e9:40:7b:85:72:38:1d:cf:7e:7e:db:18:b5:01:a3:1e:90: 2d:b4:de:3c:3b:8c:5f:00:f9:87:d6:84:e9:f1:56:1d:2a:f6: 8d:e0:55:20:09:65:16:11:17:f3:44:13:63:90:4b:ce:10:02: 60:4d:88:37:56:e4:0e:09:6d:d6:55:31:e7:f3:5f:b5:db:3c: 9c:aa:aa:7b:d4:63:15:a4:5a:f4:d9:4a:c4:d9:46:96:2b:88: ee:f9:a2:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSsb49TrENBOV40KT3XqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwN2E1YzRlYTQ1M2I0NmM4MWNiMTM2ZDkyYjkzMDliMTQ2 YzNlNDUwHhcNMjUxMjIxMTkwMjM1WhcNMjUxMjIyMTkwMjM1WjAzMTEwLwYDVQQD EygwOTBmMWI2Y2E1Yjk0NDljNjZjN2FlNmRhNDQ5OGEyMzY1MGEzM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpo2zXvq8VwzPIOtKpM2zMnUyzlv F37BNtZLXg6ff1+jqgWYaWjl3EPwEM84ziiZZKAVWgev83N7P6jD1pAU0Gzt9sPe KnZ+1Jb6puRvBhqsPU0603Fsn4UB9F6GTdBwTjgXQ2Fl8xtZyuDU1JCefX2cYjAF J5UDuIWrf9tncQ1p4YwS8kvMlwtRG0It82x+2CUSmrQYJ/6SNBbHt/JZg6/e4ELi iWzlWLvYnmqzUkvM5jfiWZ8/w8pcFYIYj5LgmWr/lzqYTvvxIBlDsOJ81KLhl+31 qHOZntVsaH2HDnDboJCRMD+t7yNBn5xowtWW8BQMYZxM+7Ei8gVJ0WoRsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkPG2yluUScZseubaRJiiNlCjPqMB8GA1UdIwQY MBaAFJB6XE6kU7RsgcsTbZK5MJsUbD5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDIt YjJhMmI4Yjg0N2I5LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDItYjJhMmI4Yjg0N2I5 LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvUNjERJ saBoHuHjZJmA8Ac6S9Ne13G1CSOYlr6w066SULy/lEaBU5FQ0K41yy6Z9DwgO6sk yz+F23WRuLEVbpB/GGL9yQ4JrdqQUqvC65eY5gxUdLZvNnih7WCxIkoiKXbGQuv3 jU74V/L7mouy/oxtF8d9IasCrgD8EXjlVYjzQUBkYVWhxjdsIfrZLzjb0sm/Ekrp woEPuDg5C3hGD8NcAelAe4VyOB3Pfn7bGLUBox6QLbTePDuMXwD5h9aE6fFWHSr2 jeBVIAllFhEX80QTY5BLzhACYE2IN1bkDglt1lUx5/Nftds8nKqqe9RjFaRa9NlK xNlGliuI7vmioQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:00:47 2025 by rpki-client